Storage Accounts - List Keys

Lists the access keys or Kerberos keys (if active directory enabled) for the specified storage account.

POST https://management.azure.com/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Storage/storageAccounts/{accountName}/listKeys?api-version=2019-06-01
POST https://management.azure.com/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Storage/storageAccounts/{accountName}/listKeys?api-version=2019-06-01&$expand=kerb

URI Parameters

Name In Required Type Description
subscriptionId
path True
  • string

The ID of the target subscription.

resourceGroupName
path True
  • string

The name of the resource group within the user's subscription. The name is case insensitive.

Regex pattern: ^[-\w\._\(\)]+$

accountName
path True
  • string

The name of the storage account within the specified resource group. Storage account names must be between 3 and 24 characters in length and use numbers and lower-case letters only.

api-version
query True
  • string

The API version to use for this operation.

$expand
query

Specifies type of the key to be listed. Possible value is kerb.

Responses

Name Type Description
200 OK

OK -- list of keys retrieved and returned successfully.

Security

azure_auth

Azure Active Directory OAuth2 Flow

Type: oauth2
Flow: implicit
Authorization URL: https://login.microsoftonline.com/common/oauth2/authorize

Scopes

Name Description
user_impersonation impersonate your user account

Examples

StorageAccountListKeys

Sample Request

POST https://management.azure.com/subscriptions/{subscription-id}/resourceGroups/res418/providers/Microsoft.Storage/storageAccounts/sto2220/listKeys?api-version=2019-06-01&$expand=kerb

Sample Response

{
  "keys": [
    {
      "keyName": "key1",
      "permissions": "Full",
      "value": "nVF7aKIvr9mV/RM5lOD0sYoi8ThXTRHQP7o66hvUmjCDkPKR3qxPu/otJcNciz2aQdqPuzJH3ECG4TU2yZjQ7Q=="
    },
    {
      "keyName": "key2",
      "permissions": "Full",
      "value": "dNJvKnULO586Ji3nFzB7987TJs4ovnGZhyGXeiVQ75HZGPhBmBfe8lXrI7EfyATff6S5ucxffCoEAQOWbmPK/Q=="
    }
  ]
}

Definitions

KeyPermission

Permissions for the key -- read-only or full permissions.

ListKeyExpand

Specifies type of the key to be listed. Possible value is kerb.

StorageAccountKey

An access key for the storage account.

StorageAccountListKeysResult

The response from the ListKeys operation.

KeyPermission

Permissions for the key -- read-only or full permissions.

Name Type Description
Full
  • string
Read
  • string

ListKeyExpand

Specifies type of the key to be listed. Possible value is kerb.

Name Type Description
kerb
  • string

StorageAccountKey

An access key for the storage account.

Name Type Description
keyName
  • string

Name of the key.

permissions

Permissions for the key -- read-only or full permissions.

value
  • string

Base 64-encoded value of the key.

StorageAccountListKeysResult

The response from the ListKeys operation.

Name Type Description
keys

Gets the list of storage account keys and their properties for the specified storage account.